• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 980
  • Last Modified:

IPSEC VPN Routing Cisco ASA 5505

I need some help on VPN Routing on a Cisco ASA 5505 but before I ask the question let me give some back round.

I have a Cisco Router with an IOS IPSEC VPN tunnel built to a Cisco ASA 5505.

In the Cisco ASA 5505 I have a seperate tunnel built to a different remote network other than the Cisco router to the ASA 5505.

I need to reach the remote network in the Cisco ASA through the tunnel of the IOS Router?

SO in other words I need to get to the seperate remote network in the ASA 5505 from the Cisco IOS router.

So IOS router through IPSEC VPN to Cisco ASA. Then from the ASA to the remote network

My porblem is I need to send traffic from the IOS firewall to the remote network in the AS
0
justasch
Asked:
justasch
  • 2
1 Solution
 
MikeKaneCommented:
Then you need to add the subnet of the destination network to the crypto maps of the IOS router so that the destination network traffic is also swept up by the VPN tunnel and sent to the ASA.   The ASA, in turn, should have the subnets of each remote network included in the cypro match access list so that it gets swept up for delivery to the remote network as well.   Its defined as a VPN hub and spoke layout.  

Here's a Cisco how to with a good outline of the scenario:
http://www.cisco.com/en/US/docs/security/asa/asa72/configuration/guide/vpnsysop.html#wp1042114
and
http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_configuration_example09186a0080093bd3.shtml
0
 
MikeKaneCommented:
I'm checking back on my older, open items...   was there anything else we could answer for you in relation to this post?
0

Featured Post

Free Tool: Site Down Detector

Helpful to verify reports of your own downtime, or to double check a downed website you are trying to access.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now